MAL-2025-192378 Malicious code in shop-api-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0306448f7e93f12777f1ee6bfa83d502c06b0a61ae631c612fabd3f8a5d6021 The package shop-api-sdk was found to contain malicious code. Source: ossf-package-analysis...

Experts Confirm JS#SMUGGLER Uses Compromised Sites to Deploy NetSupport RAT

Cybersecurity researchers are calling attention to a new campaign dubbed JSSMUGGLER that has been observed leveraging compromised websites as a distribution vector for a remote access trojan named NetSupport RAT. The attack chain, analyzed by Securonix, involves three main moving parts: An...

Malicious code in gs-uitk-lodash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de2e606bc9fde8de540caf63cbded837e1bbbd7bc6bd2d477e38dcf89a76f0b The package gs-uitk-lodash was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192377 Malicious code in gs-uitk-lodash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de2e606bc9fde8de540caf63cbded837e1bbbd7bc6bd2d477e38dcf89a76f0b The package gs-uitk-lodash was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-13636

Inappropriate implementation in Split View in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted domain name. Chromium security severity: Low...

Important: python-kdcproxy

Issue Overview: If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. This creates a server-side request forgery vulnerability, since an attacker could...

Amazon Linux 2 : unbound, --advisory ALAS2UNBOUND-1.17-2025-007 (ALASUNBOUND-1.17-2025-007)

The version of unbound installed on the remote host is prior to 1.17.0-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2UNBOUND-1.17-2025-007 advisory. NLnet Labs Unbound up to and including version 1.24.0 is vulnerable to possible domain hijack attacks. Promiscuous NS...

Medium: unbound

Issue Overview: NLnet Labs Unbound up to and including version 1.24.0 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually...

Medium: unbound

Issue Overview: NLnet Labs Unbound up to and including version 1.24.0 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually...

Medium: unbound

Issue Overview: NLnet Labs Unbound up to and including version 1.24.0 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually...

Information-Dense Reasoning for Efficient and Auditable Security Alert Triage

Security Operations Centers face massive, heterogeneous alert streams under minute-level service windows, creating the Alert Triage Latency Paradox: verbose reasoning chains ensure accuracy and compliance but incur prohibitive latency and token costs, while minimal chains sacrifice transparency a...

MAL-2025-192368 Malicious code in paysera-checkout-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb6d9d88b5364464913578a099da2b1259bed01c770b78797f9c7f97dd9ba67 The package paysera-checkout-modal was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in paysera-checkout-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb6d9d88b5364464913578a099da2b1259bed01c770b78797f9c7f97dd9ba67 The package paysera-checkout-modal was found to contain malicious code. Source: ossf-package-analysis...

Exploit for CVE-2020-1472

zerologon-lab Scripts for a lab environment demonstrating the...

MAL-2025-192366 Malicious code in react-hook-form-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1aa38d2e5718b378c2958a34a971314652bafc4462818307ae8e36df83f6cc7 The package react-hook-form-5 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in react-hook-form-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1aa38d2e5718b378c2958a34a971314652bafc4462818307ae8e36df83f6cc7 The package react-hook-form-5 was found to contain malicious code. Source: ossf-package-analysis...

Managed TLS under Migration: Authentication Authority across CDN and Hosting Transitions

Managed TLS has become a common approach for deploying HTTPS, with platforms generating and storing private keys and automating certificate issuance on behalf of domain operators. This model simplifies operational management but shifts control of authentication material from the domain owner to t...

Malicious code in datadog-checks-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c81f3e37fe2d626410665826364d682e76edf32642b1cf36d4b12b987a9b102 The package datadog-checks-base was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192361 Malicious code in datadog-checks-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c81f3e37fe2d626410665826364d682e76edf32642b1cf36d4b12b987a9b102 The package datadog-checks-base was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192356 Malicious code in fdir5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6863b32353d63e9eecdc0ff2ce31db470ed49deb7ccdee067795e37e92bb72 The package fdir5 was found to contain malicious code. Source: ossf-package-analysis 5fbb878466820a17ee68843707334225006abad5203a6e4fbc61130d466028bc...